CVEvulnerability

CVE-2020-6368

5.4 MEDIUM Published 2020-10-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-10-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 3.0 ([email protected])
5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-79

Description

SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify displayed application content without authorization, and to potentially obtain authentication information from other legitimate users, leading to Cross Site Scripting.

Affected configurations

• sap business planning and consolidation 100 • sap business planning and consolidation 200 • sap business planning and consolidation 750 • sap business planning and consolidation 751 • sap business planning and consolidation 752 • sap business planning and consolidation 753 • sap business planning and consolidation 754 • sap business planning and consolidation 755 • sap business planning and consolidation 810

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References